Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4jS459oE.exe

  • Size

    1.2MB

  • Sample

    231103-ft6qgsce4w

  • MD5

    c7bdf9f271930e91de49fecd15c74608

  • SHA1

    182e0da7fce4b75460d4a7035386aa072949d3ae

  • SHA256

    24298788ef815c8db03ed863813543276cd790e69227761dfd14a01d9ac2e899

  • SHA512

    b5a7108c4c28fc13c679b61b003a2bd26f3ac07a55e223c3939e1bd6a5aa47f6ab70abca1c64f41d0d478e13656115139543578f5a07639067f20dd5ef4aceba

  • SSDEEP

    24576:XZ22dAiItf+BVHjcIoRj3csPwTSLcqDB:hItf+BVAIwPoTSLcqN

Score
10/10
redlinegromeinfostealer

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Targets

    • Target

      4jS459oE.exe

    • Size

      1.2MB

    • MD5

      c7bdf9f271930e91de49fecd15c74608

    • SHA1

      182e0da7fce4b75460d4a7035386aa072949d3ae

    • SHA256

      24298788ef815c8db03ed863813543276cd790e69227761dfd14a01d9ac2e899

    • SHA512

      b5a7108c4c28fc13c679b61b003a2bd26f3ac07a55e223c3939e1bd6a5aa47f6ab70abca1c64f41d0d478e13656115139543578f5a07639067f20dd5ef4aceba

    • SSDEEP

      24576:XZ22dAiItf+BVHjcIoRj3csPwTSLcqDB:hItf+BVAIwPoTSLcqN

    Score
    10/10
    redlinegromeinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks